CVE-2008-3911

🗓️ 04 Sep 2008 17:00:00Reported by mitreType

The proc_do_xprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the length of a certain buffer obtained from userspace, allowing for local users to overflow a stack-based buffer via a crafted read system call for the /proc/sys/sunrpc/transports file

Reporter	Title	Published	Views	Family All 11
Cvelist	CVE-2008-3911	4 Sep 200817:00	–	cvelist
EUVD	EUVD-2008-3896	7 Oct 202500:30	–	euvd
NVD	CVE-2008-3911	4 Sep 200817:41	–	nvd
OpenVAS	SuSE Update for kernel SUSE-SA:2008:053	23 Jan 200900:00	–	openvas
OSV	BELL-CVE-2008-3911 CVE-2008-3911 does not affect BellSoft software	4 Sep 200817:41	–	osv
Prion	Stack overflow	4 Sep 200817:41	–	prion
RedhatCVE	CVE-2008-3911	30 Oct 201510:14	–	redhatcve
seebug.org	Linux Kernel proc_do_xprt()函数本地栈溢出漏洞	31 Oct 200800:00	–	seebug
SUSE CVE	SUSE CVE-2008-3911	15 Feb 202306:07	–	susecve
Tenable Nessus	openSUSE Security Update : kernel (kernel-270)	21 Jul 200900:00	–	nessus

NVD

Node

linux linux_kernelMatch2.6.26.3

Source	Link
openwall	www.openwall.com/lists/oss-security/2008/09/04/2
lkml	www.lkml.org/lkml/2008/8/30/140
securityfocus	www.securityfocus.com/bid/31937
lkml	www.lkml.org/lkml/2008/8/30/184
lists	www.lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/45136
git	www.git.kernel.org/

23 Apr 2026 00:35Current

6.6Medium risk

Vulners AI Score6.6

CVSS 27.2

EPSS0.00047

CWE-119